$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: vBpK3s8VHMkZqiUkfz6w/+Zu/NYAYFlCzGOv5am6SOA= Subject key identifier: D5:3A:5D:93:A1:B6:59:D1:D6:EF:B8:20:AE:E4:2A:81:EC:CB:AF:BA Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 275C56AA7FA3E139E2B33C84F2398702F69E4F3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03F3 Signing time: Thu 26 Mar 2026 00:42:19 +0000 Manifest this update: Thu 26 Mar 2026 00:37:19 +0000 Manifest next update: Sun 29 Mar 2026 12:41:19 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: xdErjCfMk966tDU4iQnRJbOhsmBX3IXD1cFh9Iu8PEY=) 2: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: /hqFM8bn3tDhrg+XA2pNRGjXcuItTuse0QHD782i5/Q=) 3: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: mIThS77Y3XVo/TvFXyhY/c2H6TI8fRbtuMkABrtQs6Q=) 4: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: UuTu7e3+zWAM3tqzM1lDC6GDGKFz8QAZ3rF08nv/dYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5c:56:aa:7f:a3:e1:39:e2:b3:3c:84:f2:39:87:02:f6:9e:4f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Mar 26 00:37:19 2026 GMT Not After : Mar 29 12:41:19 2026 GMT Subject: CN=D53A5D93A1B659D1D6EFB820AEE42A81ECCBAFBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:27:a0:de:d2:78:4b:ba:4a:1c:56:db:b3:9c: c4:28:49:a7:b1:0a:f1:ea:83:ce:1c:53:57:a1:70: c6:b0:d9:29:54:4a:a3:18:f3:43:73:d4:3c:ce:2f: a5:7f:99:5b:76:24:6f:97:0d:d5:1b:bd:5e:8a:3b: 39:30:65:98:03:6e:82:ff:79:b4:8b:7a:5e:10:71: 36:73:1f:e8:6f:7c:94:94:e7:38:a6:7c:e9:30:3c: 3b:71:9a:2e:e7:7b:f7:24:45:33:20:ca:cb:eb:83: 1e:4b:35:81:b2:7e:ce:02:9d:77:ee:47:f5:87:85: fe:d7:6e:fd:c8:12:8d:b1:98:2a:47:cb:7c:c4:81: e8:26:ad:9a:28:db:b5:20:ea:74:41:bf:b2:50:b2: da:7d:27:60:40:9e:a9:b4:a2:62:eb:9f:7b:92:d6: 7e:bf:ac:e2:95:83:f7:02:ec:37:af:8f:3d:b0:c0: 7e:1d:f5:a4:3a:f4:3f:c8:d5:52:0e:cc:07:0e:31: 6b:f4:5f:ec:0d:12:7c:83:c6:d4:a7:be:7b:8d:1f: a5:4f:49:2a:a4:79:38:be:71:f1:55:12:e3:1f:e8: 03:18:12:ed:fa:bb:9c:cb:e2:70:d4:53:b5:42:4f: 39:aa:06:67:93:56:e5:ed:75:a0:9b:02:6c:50:53: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3A:5D:93:A1:B6:59:D1:D6:EF:B8:20:AE:E4:2A:81:EC:CB:AF:BA X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e1:04:15:5d:1b:6c:df:8e:62:c4:25:eb:ba:a8:7c:10:ab: aa:21:63:ff:67:38:d1:80:30:c8:90:90:42:1a:ea:27:c3:2a: 88:88:10:e2:4e:fd:b9:37:1f:3f:60:f5:ab:63:de:c5:59:53: 98:21:87:dc:44:b6:48:7e:8f:dd:90:af:fa:54:74:a8:aa:db: 46:59:12:97:f1:68:a6:f2:79:45:66:08:c6:01:b1:55:79:b2: 33:f4:a2:87:44:ac:15:61:cd:91:4a:74:79:63:e5:1e:f8:ec: 26:b1:26:85:b9:4d:d9:19:11:66:a9:0f:86:c2:5f:f6:19:0f: 0d:ca:57:c7:a0:63:f6:07:e1:54:4e:08:0c:44:94:13:2a:67: 3a:8e:67:18:06:ea:23:35:7f:8c:44:b6:28:92:d9:bf:c9:4f: 22:83:19:46:63:73:45:3b:df:6c:9a:88:cd:aa:06:95:89:d0: 3a:c6:a4:40:ac:03:d2:3a:72:e5:b0:f9:9e:f0:91:34:1d:93: db:b2:89:69:d6:4b:73:57:65:79:92:06:b9:b7:f5:28:ce:16: ed:e7:32:95:da:f4:66:58:a9:dd:f4:1f:78:e7:84:fa:b7:57: bc:e3:23:aa:f4:bd:05:21:11:b9:c5:36:f9:f0:43:fd:cf:1b: 41:36:6f:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1xWqn+j4TniszyE8jmHAvaeTz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNjAzMjYwMDM3MTlaFw0yNjAzMjkxMjQxMTlaMDMxMTAvBgNV BAMTKEQ1M0E1RDkzQTFCNjU5RDFENkVGQjgyMEFFRTQyQTgxRUNDQkFGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJ6De0nhLukocVtuznMQoSaex CvHqg84cU1ehcMaw2SlUSqMY80Nz1DzOL6V/mVt2JG+XDdUbvV6KOzkwZZgDboL/ ebSLel4QcTZzH+hvfJSU5zimfOkwPDtxmi7ne/ckRTMgysvrgx5LNYGyfs4CnXfu R/WHhf7Xbv3IEo2xmCpHy3zEgegmrZoo27Ug6nRBv7JQstp9J2BAnqm0omLrn3uS 1n6/rOKVg/cC7Devjz2wwH4d9aQ69D/I1VIOzAcOMWv0X+wNEnyDxtSnvnuNH6VP SSqkeTi+cfFVEuMf6AMYEu36u5zL4nDUU7VCTzmqBmeTVuXtdaCbAmxQUw4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Tpdk6G2WdHW77ggruQqgezLr7owHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjhBBVdG2zfjmLEJeu6qHwQq6ohY/9nONGA MMiQkEIa6ifDKoiIEOJO/bk3Hz9g9atj3sVZU5ghh9xEtkh+j92Qr/pUdKiq20ZZ EpfxaKbyeUVmCMYBsVV5sjP0oodErBVhzZFKdHlj5R747CaxJoW5TdkZEWapD4bC X/YZDw3KV8egY/YH4VROCAxElBMqZzqOZxgG6iM1f4xEtiiS2b/JTyKDGUZjc0U7 32yaiM2qBpWJ0DrGpECsA9I6cuWw+Z7wkTQdk9uyiWnWS3NXZXmSBrm39SjOFu3n MpXa9GZYqd30H3jnhPq3V7zjI6r0vQUhEbnFNvnwQ/3PG0E2b28= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:39 2026 by rpki-client